1Password vs ExpressKeys Comparison

• Individual (annual): $47.88/year
• Families (up to 6 users, annual): $71.88/year

Penetration test and code review of the 1Password system

White-box design and cryptographic-trust-assumption review plus dynamic penetration testing and source-code audit of the ExpressKeys Android and iOS apps and their shared Rust core. Five senior testers, sixteen days. Backend components and third-party dependency analysis were out of scope.

Data is encrypted with AES-GCM-256. The vault key is derived from your account password using PBKDF2-HMAC-SHA256 at 650,000 iterations, then combined with a 128-bit Secret Key that never leaves your devices — so an attacker who guesses the password alone still cannot decrypt anything. Authentication uses SRP, so password-equivalent data is never sent to the server.

The vault is protected by a symmetric document key, itself wrapped by a root key derived from your vault password via PBKDF2-HMAC-SHA512 at 210,000 iterations. Cure53's March 2026 audit flagged this as GPU-crackable and recommended a memory-hard function (Argon2id or scrypt) instead.

AgileBits Inc., a Canadian company headquartered in Toronto, Ontario. Venture-funded — Accel and ICONIQ Growth both hold board seats. Founded 2005; roughly 1,400 employees.

ExpressVPN (and ExpressKeys as one of its products) is registered in the British Virgin Islands and has been part of Kape Technologies plc (LSE-listed, ultimate beneficial owner Teddy Sagi) since September 2021.